Live data from Hacker News

Klarna users are being signed in to random accounts

twitter.com

341–350 of 517 posts

Re: Klarna users are being signed in to random accounts

#341

Earlier quoted context omitted.

Why did this one disappear from the front page so fast?

Who knows, many of the HN algorithms are secret and there is no moderation log a la https://lobste.rs/moderations

True, but it's still always possible to get an answer to a question—you just have to ask. However, we might not see it unless you ask at hn@ycombinator.com.

Re: Klarna users are being signed in to random accounts

#342
post #128
post #72

Sometime in the future, people will stop belittling crypto currencies when they realize that the digitization concepts of traditional finance technology providers are inferior to those of crypto currencies and blockchains. Putting safety and security first for anything that handles money makes sense. The calls for "you don't need a blockchain, just use a database" will become less and less. Edit: Of course, Hacker Ne…

With Klarna, any fraud that results from this incident can and will be reversed thanks to both company and government regulations. With crypto, anything but perfect opsec on the entire stack through which your money travels means potentially losing all your money irreversibly. I’ll take “just use a database” thanks.

OK, then let us take the German Wirecard case. It's real. Not just a hypothetical. Will all the money that has disappeared through this fraudulent and corrupt company all be "reversed thanks to both company and government regulations?"

Sorry to spoiler you but the answer is: no.

Re: Klarna users are being signed in to random accounts

#343

Earlier quoted context omitted.

Card payments are usually debt also?

Debit cards is more common in quite a few places. My impression has always been that paying everything with a credit card is a U.S. thing. Here in Finland, It's not uncommon to have no debt apart from the mortage on one's home.

Finland doesn't have credit score system, so there's no reason to not pay not pay the credit card bill immediately. There is certain push towards credit cards, though. As far as I remember my bank would charge a yearly fee for debit card, but credit card is free for me.

Re: Klarna users are being signed in to random accounts

#344

I'm just guessing, but... "developer gets a great idea - let's push an update to the API as a GET request so we can cache this on the CDN... forgetting that the JWT token is potentially returned in the call. Now, whoever makes the call first gets their JWT token stored for everyone else to load instead when the API call is made." Ta-da, Klarna.

I can 100% see this being the cause if this comes out as the root. But... API's really shouldn't be cached? At least not at the CDN level. The risk of serving up stale dashboard data alone makes users go ????... and we definitely don't want - not even mentioning the problem here, that's crazy.

Of course you can cache it, but your assuming it should never. Nothing wrong with caching API calls on the CDN forever as long as your purge the cache once you need it. Event based purging.

Re: Klarna users are being signed in to random accounts

#345
post #140
post #72

Sometime in the future, people will stop belittling crypto currencies when they realize that the digitization concepts of traditional finance technology providers are inferior to those of crypto currencies and blockchains. Putting safety and security first for anything that handles money makes sense. The calls for "you don't need a blockchain, just use a database" will become less and less. Edit: Of course, Hacker Ne…

This is probably the most pointless comment I have seen on HN for a long time... Its not like BitCoin and other Coins are free of scams/fraud because they are not regulated... Most blockchains startups need to create problems which nobody has to sell it to people who don't know better...

What OP has posted is neither a fraud or scam. It points to a safety problem in Klarna's system.

Re: Klarna users are being signed in to random accounts

#346
post #111

Dupe https://news.ycombinator.com/item?id=27301311

Why did this one disappear from the front page so fast?

Do you mean https://news.ycombinator.com/item?id=27301311?

A moderator buried it for reasons explained here: https://news.ycombinator.com/item?id=27305371. Sorry for the delay, but these days you guys need to wait until I'm online to get explicit explanations, because I'm currently the only mod who's posting publicly.

Re: Klarna users are being signed in to random accounts

#347
post #125
post #72

Sometime in the future, people will stop belittling crypto currencies when they realize that the digitization concepts of traditional finance technology providers are inferior to those of crypto currencies and blockchains. Putting safety and security first for anything that handles money makes sense. The calls for "you don't need a blockchain, just use a database" will become less and less. Edit: Of course, Hacker Ne…

People can't use bitcoin without offloading transactions outside of the blockchain, which means entrusting an exchange, which could and probably has the same issues as Klarna.

I'm not sure what you mean. Can you elaborate on that?

Re: Klarna users are being signed in to random accounts

#348
post #175

Earlier quoted context omitted.

> Why not separate concerns? Crypto currencies work without Proof of Work today. You mean through proof of stake instead? Yay, now all the people who wanted to avoid having a competent central bank in a free democracy control the money supply get to have the people with the most money control the supply instead. Jesus fucking christ, you cryptocurrency lunatics have lost it.

Why not separate concerns? Crypto currencies work without central banking or democracies today.

They work poorly (if at all) as currencies:

(1) They're way too volatile.

(2) Even if they weren't, the popular cryptocurrencies today have fixed money supplies. A central bank cannot increase it to target moderate inflation.

Re: Klarna users are being signed in to random accounts

#349
post #175

Earlier quoted context omitted.

> Why not separate concerns? Crypto currencies work without Proof of Work today. You mean through proof of stake instead? Yay, now all the people who wanted to avoid having a competent central bank in a free democracy control the money supply get to have the people with the most money control the supply instead. Jesus fucking christ, you cryptocurrency lunatics have lost it.

I don’t necessarily disagree with the sentiment, but HN guidelines demand more constructive disagreements.

I'm sorry about my second paragraph. I'm getting a bit antsy from losing an otherwise intelligent friend to this nonsense.

Re: Klarna users are being signed in to random accounts

#350

Earlier quoted context omitted.

Card payments are usually debt also?

Debit cards is more common in quite a few places. My impression has always been that paying everything with a credit card is a U.S. thing. Here in Finland, It's not uncommon to have no debt apart from the mortage on one's home.

For what it's worth, I have paid for nearly everything I possibly could with credit cards for decades, and I haven't paid a cent in credit card finance charges in at least 15 years (since my fiancee straightened me out and helped me see that I was being dumb about debt). I have them set to auto-pay the entire balance every pay period.

I use them because consumer protections with other methods aren't as good here in the States. Paying with a credit card, if I have an issue with a vendor, after a good faith effort on my part to resolve the issue, I can just ask the credit card company to deal with it. (I don't abuse this, but I don't doubt there are people who do.)

There are better and worse credit card companies for this. American Express has great customer service but they aren't accepted in as many places.

Post reply on HN